CVE-2024-46461

{"id": "CVE-2024-46461", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.0, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.1}]}, "published": "2024-09-25T15:15:14.567", "references": [{"url": "https://www.videolan.org/security/sb-vlc3021.html", "source": "cve@mitre.org"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-122"}]}], "descriptions": [{"lang": "en", "value": "VLC media player 3.0.20 and earlier is vulnerable to denial of service through an integer overflow which could be triggered with a maliciously crafted mms stream (heap based overflow). If successful, a malicious third party could trigger either a crash of VLC or an arbitrary code execution with the target user's privileges."}, {"lang": "es", "value": "VLC media player 3.0.20 y versiones anteriores es vulnerable a la denegaci\u00f3n de servicio a trav\u00e9s de un desbordamiento de enteros que podr\u00eda activarse con un flujo de mensajes MMS manipulado con fines malintencionados (desbordamiento basado en mont\u00f3n). Si tiene \u00e9xito, un tercero malintencionado podr\u00eda provocar un bloqueo de VLC o la ejecuci\u00f3n de un c\u00f3digo arbitrario con los privilegios del usuario de destino."}], "lastModified": "2024-09-26T13:32:02.803", "sourceIdentifier": "cve@mitre.org"}